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DETAILED ACTION 

This office action is in response to the submission filed on 6/15/2007. Claims 1-25 are 
amended for examination. 



Response to Arguments 

Applicant's arguments with respect to claims 1-25 have been considered but are 
moot in view of the new ground(s) of rejection. 



Claim Rejections ■ 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 



Claims 1-12, 14-16, 19-25 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Justice, Jr. et al (us pat 6,418,469) (hereinafter Justice) in view of 
Johnson (us pat 6,275,855). 
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As regarding claim 1, Justice discloses receiving network management data 
(col.1 , lines 25-39), and determining if the network management data indicates the 
resolution of a previous event generated by the network management system in 
response to previously received network management data (col.1, lines 25-67, col. 3, 
lines 26-67; col.4, lines 1-33, also see Fig. 5, the log represents the list of action and 
recurring action, determine if the event in the log is resolved, then the management 
program updates the event list in response to the condition being resolved, the previous 
event is just an event in the log); automatically removing said previous event from a 
memory of the network management system (see Justice col.1, lines 38-42, col. 3, lines 
57-58, automatically remove the event from the log without user intervention). Justice 
discloses automatically update the event list in the condition being resolved, Justice 
does not explicitly disclose determining the resolution of event in real-time and changing 
a severity indicator of said previous event dependent on said determining step; 
depending on said severity indicator. However the concept of determining network 
event resolution in real-time and changing the severity indication is a well-known 
concept in the networking art. For instant Johnson discloses a network management 
system that having the capability of facilitate real-time problem resolution and changing 
the severity indicators by changing the color code on the interface (see Johnson col.1 , 
lines 29-30; col.2, lines 18-30; col. 5, lines 58-67). 

It would have been obvious to one with ordinary skill in the art at the time the 
invention was made to combine the teaching of Johnson to the method of Justice 
include determining in real-time and changing the severity indicators for the purpose of 
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allowing for the immediate execution of remedial actions to minimize adverse 
consequence potential associated with the event (see Johnson col. 3, lines 4-6). 

As regarding claim 2, Justice-Johnson discloses if the network management 
data indicates the resolution of a previous event, the method further comprises marking 
the previous event as resolved (see Justice, Fig. 8, mark date and time of resolved 
event). 

As regarding claim 3, Justice-Johnson discloses the network management data 
is processed in response to the network management system receiving network 
management data from the network (see Justice, col.1 , lines 25-67). 

As regarding claim 4, Justice-Johnson discloses the network management data 
comprising values of a monitored characteristic of a part of the network for which an 
event is generated if the monitored value exceeds a predetermined threshold (see 
Justice col. 3, linesl 9-67, col.4, lines 1-33; also see Fig. 5, the log represents the list of 
action and recurring action, determine if the event in the log is resolved, then the 
management program updates the event list in response to the condition being 
resolved, the previous event is just an event in the log), wherein an event list includes 
an unresolved previous event for the monitored characteristic, wherein the step of 
receiving network management data comprises receiving a value for the monitored 
characteristic, and the step of determining comprises considering whether the 
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monitored value has been below the predetermined threshold for a preceding time 
period, and if so determining that the received value indicates the resolution of the 
unresolved previous event (see Justice col. 3, lines19-67, col.4, lines 1-33; also see 
Fig. 5, the log represents the list of action and recurring action, determine if the event in 
the log is resolved, then the management program updates the event list in response to 
the condition being resolved, the previous event is just an event in the log). 

As regarding claim 5, Justice-Johnson discloses in response to receiving the 
network management data, comparing a first received value for the monitored 
characteristic with the predefined threshold, and if the value is below the predefined 
threshold, starting a timer, the timer expiring at the end a predefined time period (see 
Justice col.3, lines 26-67, col.4, lines 1-33). 

As regarding claim 6, Justice-Johnson discloses comparing each subsequent 
received value for the monitored characteristic with the predefined threshold, and if any 
value exceeds the threshold canceling the timer (see Justice col.3, lines 26-67, col.4, 
lines 1-33). 

As regarding claim 7, Justice-Johnson discloses when the timer expires, 
determining that the monitored value has been below the predetermined threshold for 
the preceding time period (see Justice col.3, lines 26-67, col.4, lines 1-33). 
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As regarding claim 8, the limitations are similar to limitation of rejected claim 1 , 
therefore rejected for the same rationale as claim 1, in addition Justice-Johnson 
discloses periodically receiving a value for the monitored characteristic (see Justice, 
col.4, lines 19-33); if a received value exceeds a predetermined threshold for the 
monitored characteristic generating an event (see Justice, col. 3, lines 43-67, col.4, lines 
1-17); and thereafter, periodically considering whether the monitored value has been 
below the predetermined threshold for a preceding time period, and if so determining 
that the event is resolved (see Justice col. 3, lines 26-67). The same motivation was 
utilized in claim 1 applied equally well to claim 8. 

As regarding claim 9, Justice-Johnson discloses the preceding time period is an 
immediately preceding predetermined time period, and the step of periodically 
considering comprises considering whether the monitored value has been below the 
predetermined threshold for the immediately preceding time period in response to each 
subsequently received value (see Justice col. 3, lines 19-67, col.4, lines 1-33). 

As regarding claim 10, Justice-Johnson discloses the step of considering 
determines that the event is resolved; the method further comprises marking the event 
as resolved (see Justice Figure 8, mark the date of the resolved event). 

As regarding claim 11, Justice-Johnson discloses the network management 
data relating to an asynchronous Trap being received by the network management 
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system, wherein the step of determining comprises considering if the Trap indicates the 
possible resolution of an event in an event log (see Justice, col. 3, lines 14-67). 

As regarding claim 12, Justice-Johnson discloses if the Trap indicates the 
possible resolution of an event in an event log, the step of determining further 
comprises considering whether the event log includes a previously received event that 
is resolved by the Trap (see Justice col. 3, lines 14-67). 

As regarding claim 14, Justice-Johnson discloses the method processes 
network management data previously received by the network management system and 
stored in memory (see Justice col. 3, lines 6-13, database store action list). 

As regarding claim 15, Justice-Johnson discloses the step of receiving network 
management data comprises receiving event data relating to an event stored in 
memory, in response to a scan of previously generated events stored and included in 
an event log (see Justice, col.2, lines 51-67). 

As regarding claim 16, Justice-Johnson discloses the event data relates to a 
recurring event and includes the time of the last occurrence of the event (see Justice 
col.2, lines 51-67, Figure. 8). 
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As regarding claim 19, the limitations are similar to limitation of rejected claim 1, 
therefore rejected for the same rationale as claim 1, in addition Justice-Johnson 
discloses a method for processing event data generated by a network management 
system during the monitoring of a network (see Johnson col. 5, lines 47-67; col. 6, lines 
1-8) the method processing event data relating to events previously generated by the 
network management system a plurality of times and which may be entered in the event 
log as a recurring event (see Justice col.1, lines 25-67, col. 3, lines 26-67; col.4, lines 1- 
33, also see Fig. 5, the log represents the list of action and recurring action, determine if 
the event in the log is resolved, then the management program updates the event list in 
response to the condition being resolved, the previous event is just an event in the log, 
event 1 1000 appeared three times in the log, also see Figure. 8, upgrade system Rom 
appeared twice with two different time periods), determining if an event has already 
been logged a predetermined number of times in an event list, and if so automatically 
identifying a recurring event to be processed from the event list (see Justice col.1 , lines 
25-67, col. 3, lines 26-67; col.4, lines 1-33, also see Fig. 5); and considering whether the 
condition which caused the event to be generated has occurred in a preceding time 
period (see Justice col.1, lines 25-67, col. 3, lines 26-67; col.4, lines 1-33, also see 
Fig. 5). The same motivation was utilized in claim 1 applied equally well to claim 19. 

As regarding claim 20, Justice-Johnson discloses if the step of considering 
determines that the condition which caused the event to be generated has not occurred 
in the preceding time period, determining the event to be resolved (see Justice col.1, 
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lines 25-67, col. 3, lines 26-67; col.4, lines 1-33, also see Fig. 5, the log represents the 
list of action and recurring action, determine if the event in the log is resolved, then the 
management program updates the event list in response to the condition being 
resolved, the previous event is just an event in the log). 

As regarding claim 21, Justice-Johnson discloses mark the event in the event 
list as resolved (see Johnson col. 6, lines 39-41)/ The same motivation was utilized in 
claim 1 applied equally well to claim 21. 

As regarding claim 22, the limitations are similar to claim 1, therefore rejected 
for the same rationale as claim 1 . 

As regarding claims 23-25, the limitations are similar to claims 1-4, therefore 
rejected for the same rationale as claims 1-4. 



Claim 13 is rejected under 35 U.S.C. 103(a) as being unpatentable over Justice, 
Jr. et al (us pat 6418469) (hereinafter Justice) in view of Johnson (us pat 6,275,855) 
and further in view of Arrowsmith et al (us pat 66,373,383) (hereinafter Arrowsmith). 
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As regarding claim 13, Justice considering if the Trap (col.1, Iine13, trap) 
indicates the possible resolution of a event in an event log, and if so considering if the 
Trap indicates the possible resolution of a further event in the event log (see Justice 
col. 3, lines 26-58, the network message Trap indicate the same problem or other 
problem has occurred, management application identify when a condition has been 
resolved). 

Justice does not explicitly disclose considering in real-time. However the 
concept of considering in real-time is a well-known concept in the networking art. For 
instant Johnson discloses a network management system that having the capability of 
facilitate real-time problem resolution (see Johnson col.1, lines 29-30; col. 2, lines 18-30; 
col. 5, lines 58-67). 

It would have been obvious to one with ordinary skill in the art at the time the 
invention was made to combine the teaching of Johnson to the method of Justice 
include determining in real-time for the purpose of allowing for the immediate execution 
of remedial actions to minimize adverse consequence potential associated with the 
event (see Johnson col. 3, lines 4-6). 

The combination of Justice-Johnson does not teach determining if the received 
Trap is a reportable condition. 

Arrowsmith teaches determining if the received Trap is a reportable condition 
(see arrowsmith col.4, lines 16-27, if the alarms pass the filter criteria, the alarm 
message is sent to the appropriate network management application). 
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It would have been obvious to one with ordinary skill in the art at the time the 
invention was made to combine the teaching of Arrowsmith to the method of Justice- 
Johnson to determine if the received trap is a reportable condition because by doing so 
it would provide great control over which alarm get reported to network management 
applications and to ensure consistency of reported alarms across multiple network 
application (see Arrowsmith col.4, lines 65-67 to col.3, lines 1-2). 



Claims 17-18, are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Justice in view of Johnson as applied to claim 16 above and further in view of Gaffaney 
et al (us pat 5634008) (hereinafter Gaffaney). 

As regarding claim 17, Justice-Johnson discloses all limitations of claim 1,16 
above but does not discloses comparing the present time with the time of the last 
occurrence of the event, and, if the time difference is greater than a predetermined time 
interval, determining that the event is resolved. Gaffaney teaches comparing the 
present time with the time of the last occurrence of the event (col.3, lines 1-12), and, if 
the time difference is greater than a predetermined time interval, determining that the 
event is resolved (col.3, lines 1-12). 

It would have been obvious to one with ordinary skill in the art at the time of the 
invention was made to combine the teaching of Gaffaney to the method of Justice- 
Johnson to have comparing the time of the events, if the time difference is greater than 
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a predetermined time interval, determining that the event is resolved for the purpose of 
eliminating the need for maintenance of multiple timer and for recalculating time 
intervals in order to determine whether or not prescribed threshold conditions 
associated with a plurality of events associated with a plurality of devices in 
communication network have been detected (see Gaffaney col. 2, lines 14-29). 

As regarding claim 18, Justice-Johnson-Gaffaney discloses the step of 
determining determines that the event is resolved, the method further comprises 
marking the recurring event as resolved (see Justice, col. 2, lines 51-67, col. 3, lines 1- 
67, also see Fig. 8, mark the date and time of the resolved event). 



Conclusion 

Applicant's amendment necessitated the new ground(s) of rejection presented in 
this Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP 
§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a), 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
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shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 
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Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Duyen M. Doan whose telephone number is (571) 272- 
4226. The examiner can normally be reached on 9:30am-6:00pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Bunjob Jaroenchonwanit can be reached on (571) 272-3913. The fax 
phone number for the organization where this application or proceeding is assigned is 
571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



Examiner 
Duyen Doan 
Art unit 2152 
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